CVE-2014-0005

Name of the Vulnerable Software and Affected Versions Red Hat JBoss Enterprise Application Platform (JBEAP) version 6.2.2 JBoss BRMS versions prior to 6.0.3 roll up patch 2

Description The issue allows remote authenticated users to read and modify the application server configuration and state by deploying a crafted application.

Recommendations For Red Hat JBoss Enterprise Application Platform (JBEAP) version 6.2.2, update to a version that includes the necessary security patches. For JBoss BRMS versions prior to 6.0.3 roll up patch 2, apply roll up patch 2 or later to resolve the issue.